$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa File: 323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa (raw, json) Hash identifier: 05ujGz8LMZaKSe4JP6feKrZA8lMnkTiCG9sdYs5wdKs= Subject key identifier: 41:00:1A:A9:87:DB:AB:76:D7:CA:17:7A:CF:0B:33:DA:77:49:0C:93 Certificate issuer: /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Certificate serial: 74C45E4CEFF8232741708A238CA14A7FA1D875B4 Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa Signing time: Tue 07 Oct 2025 13:05:41 +0000 ROA not before: Tue 07 Oct 2025 13:00:41 +0000 ROA not after: Tue 06 Oct 2026 13:05:41 +0000 asID: 274486 IP address blocks: 2804:94e8:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c4:5e:4c:ef:f8:23:27:41:70:8a:23:8c:a1:4a:7f:a1:d8:75:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F Validity Not Before: Oct 7 13:00:41 2025 GMT Not After : Oct 6 13:05:41 2026 GMT Subject: CN=41001AA987DBAB76D7CA177ACF0B33DA77490C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:60:8e:b3:f8:eb:73:f9:59:69:5c:f5:8f: e8:50:60:24:00:3c:0c:a5:8f:56:f7:96:74:b1:58: e6:9f:eb:24:0a:a9:5f:f1:91:2a:c1:9e:43:d8:9e: 87:87:03:8b:d1:bd:4d:0b:07:9c:ea:36:81:a3:0e: 18:e4:d3:c2:e3:17:fc:77:8e:86:eb:f6:11:cc:b8: df:85:4c:25:83:79:83:34:92:f7:eb:f7:03:45:b4: 66:63:f8:61:fe:30:04:5c:56:b3:0f:b4:06:9c:d0: cb:71:2f:aa:38:66:9e:38:a2:27:6f:33:9a:0a:77: ef:95:4c:80:35:85:93:cc:69:64:fe:c9:e8:22:8b: 14:80:cd:c3:45:a7:30:c9:d6:67:1e:e3:43:b2:34: 69:33:63:b1:41:c4:b9:30:92:9b:80:47:25:4f:a9: 5f:8a:89:63:d1:4a:f6:b0:0a:f2:90:42:3e:2d:07: 6f:94:48:60:1e:a1:27:8d:cb:6c:46:41:a2:97:be: 0e:6d:d1:27:00:26:7e:0b:06:f6:0a:ea:61:f4:7a: 38:da:3b:5e:df:7d:ec:0e:56:67:09:a8:a5:6a:df: 72:bf:cd:41:11:82:ce:e5:3c:fd:65:81:50:f8:1b: 38:d4:fc:95:38:1f:93:c5:09:98:61:7b:29:68:7a: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:00:1A:A9:87:DB:AB:76:D7:CA:17:7A:CF:0B:33:DA:77:49:0C:93 X509v3 Authority Key Identifier: keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:94e8:1001::/48 Signature Algorithm: sha256WithRSAEncryption 43:ba:81:3d:9b:0f:a0:94:98:58:b5:7d:d1:a0:7f:0b:e3:3b: a0:0a:66:20:65:ad:55:28:ff:48:0e:e3:86:dc:55:48:37:96: 6b:f7:a2:12:a6:d2:fc:af:aa:03:1c:57:79:9a:73:b4:56:6a: fc:b0:fc:b2:f2:cc:4a:af:b5:c7:67:a5:9f:a3:16:f7:88:b1: 5b:db:c0:39:48:a6:bb:40:dd:7c:ea:bd:4f:bc:a9:1e:b7:92: 27:f7:a3:32:5b:4b:88:34:2c:ae:0b:5d:31:6c:88:a5:fa:8f: 43:f5:92:fe:5e:dd:5e:22:fa:49:1c:a4:f0:dd:0d:1b:61:4d: 4b:72:d1:73:c8:28:82:25:63:53:e1:8c:ed:6e:43:86:b4:a3: 7c:f6:ab:95:d6:39:a9:df:76:5f:07:ce:2b:0b:cb:07:94:cf: 55:5a:72:44:49:de:f8:32:63:34:8a:60:45:05:b3:7b:58:60: 77:17:9f:e0:6d:f1:9e:e6:f9:29:d7:d0:6f:c4:8a:04:95:ff: 30:0c:06:d5:52:e7:f3:30:2d:50:82:39:ad:56:9d:d2:22:0d: a3:39:61:bf:19:48:c7:86:4a:0e:a9:6b:54:21:f2:d0:75:dc: 7d:1c:f0:d5:68:85:18:4c:7d:e5:dc:48:16:05:06:0c:95:15: eb:bb:1e:16 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUdMReTO/4IydBcIojjKFKf6HYdbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk1QTNDMEI4RjhBMkNFRkRDMzgzRDU3NkY5MDcyQkND QzcwQ0I5RjAeFw0yNTEwMDcxMzAwNDFaFw0yNjEwMDYxMzA1NDFaMDMxMTAvBgNV BAMTKDQxMDAxQUE5ODdEQkFCNzZEN0NBMTc3QUNGMEIzM0RBNzc0OTBDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmj2COs/jrc/lZaVz1j+hQYCQA PAylj1b3lnSxWOaf6yQKqV/xkSrBnkPYnoeHA4vRvU0LB5zqNoGjDhjk08LjF/x3 jobr9hHMuN+FTCWDeYM0kvfr9wNFtGZj+GH+MARcVrMPtAac0MtxL6o4Zp44oidv M5oKd++VTIA1hZPMaWT+yegiixSAzcNFpzDJ1mce40OyNGkzY7FBxLkwkpuARyVP qV+KiWPRSvawCvKQQj4tB2+USGAeoSeNy2xGQaKXvg5t0ScAJn4LBvYK6mH0ejja O17ffewOVmcJqKVq33K/zUERgs7lPP1lgVD4GzjU/JU4H5PFCZhheyloemIVAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUQQAaqYfbq3bXyhd6zwsz2ndJDJMwHwYDVR0j BBgwFoAUOVo8C4+KLO/cOD1Xb5ByvMxwy58wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw OXUvMC8zOTVBM0MwQjhGOEEyQ0VGREMzODNENTc2RjkwNzJCQ0NDNzBDQjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUEzQzBCOEY4QTJDRUZE QzM4M0Q1NzZGOTA3MkJDQ0M3MENCOUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv MzIzODMwMzQzYTM5MzQ2NTM4M2EzMTMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk M2UyMDMyMzczNDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgElOgQATANBgkqhkiG9w0BAQsF AAOCAQEAQ7qBPZsPoJSYWLV90aB/C+M7oApmIGWtVSj/SA7jhtxVSDeWa/eiEqbS /K+qAxxXeZpztFZq/LD8svLMSq+1x2eln6MW94ixW9vAOUimu0DdfOq9T7ypHreS J/ejMltLiDQsrgtdMWyIpfqPQ/WS/l7dXiL6SRyk8N0NG2FNS3LRc8gogiVjU+GM 7W5DhrSjfParldY5qd92XwfOKwvLB5TPVVpyREne+DJjNIpgRQWze1hgdxef4G3x nub5KdfQb8SKBJX/MAwG1VLn8zAtUII5rVad0iINozlhvxlIx4ZKDqlrVCHy0HXc fRzw1WiFGEx95dxIFgUGDJUV67seFg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:42 2025 by rpki-client